Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/41623A12778111ED8F236A62C4F9AE02.roa
File:                     41623A12778111ED8F236A62C4F9AE02.roa (raw, json)
Hash identifier:          TaxImBm3ML6L93bSf7LgCo2dDuHN+GnT1SSfjdrYDbs=
Subject key identifier:   A7:87:CD:7B:AA:8A:2C:8C:51:A0:37:79:55:79:96:DB:78:B9:8A:CE
Certificate issuer:       /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial:       339B
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/41623A12778111ED8F236A62C4F9AE02.roa
Signing time:             Fri 16 Feb 2024 15:41:09 +0000
ROA not before:           Fri 16 Feb 2024 15:41:09 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     394695
IP address blocks:        45.113.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
                          rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13211 (0x339b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
        Validity
            Not Before: Feb 16 15:41:09 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65cf8215-1e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:ac:4c:d1:e3:81:e3:82:78:57:f9:1f:92:
                    f5:f4:77:9d:2f:64:ba:94:0d:ac:5e:f6:78:e2:ca:
                    16:09:a3:9b:73:ca:73:a9:da:62:45:9e:9d:a3:c5:
                    14:e2:e5:f1:af:0e:6f:42:bc:8b:e2:8f:ff:be:80:
                    af:ef:f6:95:8c:d8:f2:d4:2f:04:4b:bf:1f:f1:d1:
                    36:aa:1b:8a:32:6e:d6:50:36:4e:fc:b2:bf:e0:d3:
                    d1:ce:52:a9:01:15:cf:0c:75:de:4e:a2:73:9d:ed:
                    bc:f9:e7:3f:69:91:42:66:f0:92:fc:99:78:31:f8:
                    00:9f:ee:6c:f8:9f:f8:ef:24:88:8d:a6:8a:27:c0:
                    a1:d4:47:43:cf:ba:e0:e9:73:ed:b1:f6:ec:31:11:
                    88:34:40:f2:6f:ea:18:80:e0:a4:59:55:b0:af:d4:
                    88:7f:dd:aa:f1:ba:8e:60:ff:c0:66:63:61:64:96:
                    8a:3b:6b:d2:64:ea:96:2d:6f:b2:06:9f:d8:5d:b1:
                    23:bc:f1:a4:85:19:cc:21:b2:0c:da:b8:47:49:8f:
                    a9:53:9f:f9:6e:51:6e:1f:3d:4e:3b:40:c8:68:b2:
                    0e:fe:25:60:25:71:4b:93:f9:38:ac:b6:26:c6:18:
                    f6:c8:da:7d:3f:22:96:31:cd:39:7d:48:ad:b9:9d:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:87:CD:7B:AA:8A:2C:8C:51:A0:37:79:55:79:96:DB:78:B9:8A:CE
            X509v3 Authority Key Identifier:
                keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/41623A12778111ED8F236A62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:bb:83:f0:67:6c:6c:2c:47:f7:8a:b6:26:73:5d:27:63:
         8e:21:37:59:23:f2:0a:84:1d:65:bd:e0:4d:e4:05:b8:55:ad:
         72:89:a6:72:0e:eb:da:e0:b8:14:76:30:61:25:c4:30:08:16:
         db:2a:57:2c:e1:c3:77:ea:5c:18:10:75:c4:8f:ed:d3:e6:45:
         c4:9b:ed:f9:cf:5f:c6:92:6d:e7:ef:e3:93:66:56:16:16:7e:
         5c:30:16:64:cd:ad:10:2f:e4:34:1b:31:fa:0d:6f:0a:36:74:
         35:ec:64:e8:bb:80:06:02:bd:75:f6:bd:e9:2c:1b:8e:7a:42:
         1a:a8:ea:46:df:d5:85:28:bc:4a:23:16:f2:f8:eb:88:5a:11:
         d0:b7:58:1d:a6:e2:d1:6f:b7:6c:0b:62:e2:b4:44:ce:2a:02:
         b6:07:ea:b6:ca:8e:52:fa:6b:24:3d:ee:66:4a:dd:33:08:d7:
         6d:a0:81:eb:ce:0a:43:80:b1:ff:7e:be:89:e1:4e:7c:48:54:
         38:3c:63:71:2f:ea:bd:e2:80:3b:5f:da:fa:5f:dd:82:57:9f:
         a0:14:6a:23:fc:58:65:94:52:ac:9b:0e:e8:23:bf:c1:29:93:
         7a:51:77:37:e2:04:56:68:c7:e2:a2:82:3a:5d:eb:18:de:71:
         d2:83:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org